Policy routing marks the outbound packets correctly while rp_filter still rejects the asymmetric return path during a failover rehearsal

Forwarding is valid in one direction and kernel anti-spoofing defeats the other. Normal traffic masked the issue until the standby or alternate path became active under rehearsal conditions.